securing-with-access-rights
Execution skill. Use when restricting which users can read or write specific data cells based on dimension values, building AR metrics, or debugging access issues. Do NOT use for managing Roles or Permissions.
Install
With your agent
Install OMGSkills skill "gopigment/ai-plugins:skills/securing-with-access-rights" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/gopigment/ai-plugins /tmp/ai-plugins && ln -s /tmp/ai-plugins/skills/securing-with-access-rights ~/.claude/skills/securing-with-access-rightsFrom README
Securing with Access Rights Roles vs Permissions vs Access Rights Keep these three concepts separate — they are managed by different tools and control different things: | Concept | Controls | Managed by | | --- | --- | --- | | Permissions | Feature access — which actions a user can perform (create metrics, edit boards, import data, …) | Pigment UI (Roles, permissions & access) | | Roles | A named bundle of granted permissions (+ default read/write access) assigned to users | Pigment UI (Roles, permissions & access) | | Access Rights (AR) | Cell-level data read/write (e.g. user can write US data, read FR data) | AR metrics and rules — this skill | Golden rule: Roles and Permissions protect actions; Access Rights protect data. Fine-grained data security is enforced by AR rules, not by roles alone. Managing Roles or Permissions themselves is out of scope for this skill.